PGPhkDeleteHook
PGPhkSetHook
Static task
static1
Behavioral task
behavioral1
Sample
b7301a254163fc40a2ed945ae76ca47a10564c18424be8d85f7156b693d3d396.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
b7301a254163fc40a2ed945ae76ca47a10564c18424be8d85f7156b693d3d396.dll
Resource
win10v2004-20240802-en
Target
b7301a254163fc40a2ed945ae76ca47a10564c18424be8d85f7156b693d3d396
Size
4.6MB
MD5
9c6884f1aaefdf3e6953d77e3ba20d4a
SHA1
10d862f980c6af76ba123ebf0b81c641453f8034
SHA256
b7301a254163fc40a2ed945ae76ca47a10564c18424be8d85f7156b693d3d396
SHA512
7c176886477780a1d6f45afcf29dce9139e896daa3c6c03bf31eedbf18e4d39045cc491903d5bec2fa2d82e8b903dc4cad7b78e093579b8df4531da4ddcc43f4
SSDEEP
98304:8QKotcTlBk9YwzEhPbYzjmMtccXk8KMXTz9xehCtD3/wRMi9vzYWP:8QKQGG9KPUnmMtccXf/X/9XNoz9bbP
Checks for missing Authenticode signature.
resource |
---|
b7301a254163fc40a2ed945ae76ca47a10564c18424be8d85f7156b693d3d396 |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
ReadFile
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
PGPhkDeleteHook
PGPhkSetHook
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ